Xum Files

Models

• Gemini 4 Carbon. Google's new model is in the registry for the Google and Vertex AI providers, with the aliases carbon and gemini-carbon, a 1M-token context and low, medium and high thinking. Xum strips the frequency and presence penalties that Carbon rejects. gemini-4 still points at Argon (#8108).
• Claude Fable 5.2 and Mythos 5.2 are now the fable and mythos models (#8078). The refusal fallback follows Anthropic's Fable 5.2 guidance (#8094), and Mythos 5.1 is treated as prefix-bound again, per the current preserved-thinking docs (#8082).
• Claude Opus 4.8 no longer offers Fast mode, before Anthropic removes it (#8099).
• A Coder-scoped fallback key no longer hides the direct Fable seed (#5470), and hand-edited fallback keys with stray whitespace are read the way they are saved (#8089).

Other changes

• Cursor plugins. Xum reads Cursor plugin manifests and loads their rules as skills (#7837), their MCP servers (#7838) and their hooks, with trust and file review (#7846). Settings > Plugins shows one merged Cursor and Claude marketplace list (#7844).
• Plugins. The installed plugin list is backed up and offered for review on restore (#7985, [#8036]). Read-only Claude plugin agents can search code (#7939). OAuth sign-ins of MCP servers that a plugin update removes or an uninstall deletes are signed out (#7941). Local plugin sources and projects clone through git's transport (#7936, [#7942]).
• Memory. The memory harvest is now an analyzer that reads and corrects workspace memory and sees tool calls and results (#7990, [#7988]). The dream runs at most once per 6 hours, one at a time (#7989), and stops when its estimated cost is over a ceiling you set (#7987). Credentials and Azure shared access keys stay out of memory text (#8007, [#8008], [#8034]).
• Mermaid. Diagrams render with Pele in the selected theme (#7820), at explicit pixel sizes so Safari shows them (#7925), and whole in the expand dialog (#7930).
• Costs. The Costs tab and the prompt cache summary include open sub-agents' spend (#7861, [#7865], [#7866], [#7867]).
• Agents and hooks. Per-agent Anthropic prompt-cache TTL (#7767). Per-hook Stop continuation limits, capped at 50 per user turn (#7835). Live line follow-ups and a Waiting on you card (#7687). bash timeout_secs is optional with a 60s foreground default (#7958).
• Stop and restart. A Stop, a workspace-turn interrupt and a hard timeout end the auto-retry loop (#7892, [#7896]), and startup recovery no longer resumes a turn that was stopped or interrupted (#7898, [#7899], [#7901], [#7903]).
• Shortcuts. The background bashes shortcut moves to Ctrl/Cmd+Alt+J (#7763).
• Phones and tablets. The iPhone Duo web app uses the cover display's full width and keeps taps and size working across folds (#7976, [#8042], [#8043], [#7986]), and phone layouts keep names and paths whole (#8058, [#8084]).
• Artifacts. Live artifacts stay open in WebKit (#8010, [#8063], [#8087]), hash routers navigate in HTML artifacts (#7997), and "Open as artifact" opens files outside the checkout (#7915).
• Reliability. server.lock liveness is decided by process identity, and a reader never deletes a lock (#7952, [#7956], [#7961]). GitHub gateway errors are transient update-check failures (#8031). The Docker runtime resolves ~ from the container user's home (#7951). The sidebar no longer re-renders on every new-chat draft save (#8109).
• Under the hood. The dev-server sandbox now requires an auth token over a private Unix socket (#7902 to [#7912]), plus new tests and gate fixes across the agent loop.

Full changelog: https://github.com/coder/xum/compare/v0.32.1...v0.32.2